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AMENDMENT TO THE CLAIMS 
Please amend the presently pending claims as follows: 

1 - 19. (Cancelled) 

20. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values Q l ,Q 2 , -,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^., G ; verifying either the equation G^Q. =lmodw or the 
equation G i =Q { V modw, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for j = l,...,mis such that G ; =^ ; 2 modw, wherein g t for 
i = l,...,m [[)]] is a base number having an integer value greater than 1 and smaller than each of 
the prime factors p 1 ,...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed such that: R = r v mod n , wherein r is an integer randomly chosen by the 
demonstrator; 

choosing m challenges d v d 2 ,...,d m randomly; 
sending the challenges d v d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value computed 
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such that: D = r • Q dl • Q 2 2 • ... • Q m dm mod n ;and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v • G^ 1 1 • G 2 2 2 • ... • G m £m ™ mod n is equal to the commitment R , wherein, for i = l,...,m , 
£ i = +1 in the case G i • Q- = 1 mod n and £ i = -1 in the case G i = Qj mod n . 

21. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values Q v Q 2 ,...,Q m and respective public values 
G 1 ,G 2 ,...,G m , each pair of values<2 ; ,G ; verifying either the equation G^Q^ =lmodw or the 
equation G ; =Q t v modn , wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G i for i = l,...,m is such that G ; =g ; 2 modw, wherein g ; for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ..., p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed using the Chinese remainder method from a series of commitment components Rj , the 

commitment components Rj having a value such that: Rj = r ; . v mod p } for j = !,...,/ , wherein 
/},..., r f is a series of integers randomly chosen by the demonstrator; 

choosing m challenges d v d 2 ,...,d m randomly; 

sending the challenges d v d 2 ,...,d m to the demonstrator; 



receiving a response D from the demonstrator, the response D being computed from a 
series of response components D ; using the Chinese remainder method, the response 

components D j having a value such that: D j = r j • <2i /' • Q 2 / 2 *-*Q m /" m °d Pj for 
j = l,...,f , wherein Q i j = Q i mod p j for i = l,...,m and j = ; and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v •G 1 £ldl *G 2 ldl • ... • G m Emdm mod n is equal to the commitment R , wherein, for i = l,...,m, 
£ i = +1 in the case G ; • Q- = 1 mod n and e i = -1 in the case G ; = Q- mod n . 

22. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values Q l ,Q 2 ,...,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^, G ; verifying either the equation G^Q- =lmodw or the 
equation G i =Q. modw, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = l,...,m is such that G i =g i modw, wherein g t for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T = h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 
and R is a commitment having a value computed such that: R = r v mod n , wherein r is an 
integer randomly chosen by the demonstrator; 
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choosing m challenges d l ,d 2 ,...,d m randomly; 
sending the challenges d l ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value such that: 
D = r • Q dl • Q 2 2 • ... • Q m dm mod n ; and 

determining that the message M is authentic if the response D has a value such that: 
Ji{m ,D V •G 1 £ldl •G 2 2dl •...•G m £mdm mod n)is equal to the token T, wherein, for i = l,...,m, 
£ i = +1 in the case G i *Q- =1 mod n and e i = -1 in the case G i = Qj mod n . 

23. (Previously Presented) A computer implemented process comprising: 

obtaining a set of one or more private values Q l ,Q 2 ,...,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^, G ; verifying either the equation G^Q- =lmodw or the 
equation G i =Q. modw, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = l,...,m is such that G ; = g t 2 modw , wherein g ; for i = l,...,m 
is a base number having an integer value greater than 1 and smaller than each of the prime factors 
p v ,...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T = h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 
and R is a commitment having a value computed out of commitment components Rj by using 
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the Chinese remainder method, the commitment components Rj having a value such that: 
Rj = r ; v mod p j for j = !,...,/ , wherein r v ,...,r f is a series of integers randomly chosen by the 
demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 
sending the challenges d v d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
series of response components D j using the Chinese remainder method, the response 

components D j having a value such that: D ; = r j *Q 1J 1 *Q 2 j 2 * — *Q m j ™ m °d p ; for 
j = l,...,f , wherein Q UJ = Q i mod p j for i = l,...,m and j = ; and 

determining that the message M is authentic if the response D has a value such that: 
Ji{m ,D V •G 1 £ldl •G 2 eidl •...•G m £mdm mod n)is equal to the token T, wherein, for i = l,...,m, 
£ i = +1 in the case G ; • Q- =1 mod n and e i = -1 in the case G ; = Q- mod n . 

24. (Previously Presented) The computer implemented process according to claim 20, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = 1, . . . , m . 

25. (Currently Amended) A computer implemented process comprising: 

obtaining a set of one or more private values Q 1 ,Q 2 ,...,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^., G ; verifying either the equation G ; • =lmodw or the 
equation G ; =Q- modw, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 



-7- 



other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = l,...,m is such that G i =g i mod/?, wherein g ; for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ...,p f , and g { is a non-quadratic residue of the ring of integers modulo n ; 

recording a message M to be signed; 

choosing m integers r t randomly, wherein i is an integer between 1 and m ; 

computing commitments R t having a value such that: R t = /f mod n for i = l,...,m ; 

computing a token T having a value such that T = h(M ,R 1 ,R 2 ,...,R m ) , wherein h is a 
hash function producing a binary train consisting of m bits; 

identifying the bits d l ,d 2 ,...,d m of the token T ; 
computing responses D i = r t ■ Q*' mod n for i = l,...,m; and 

maldng the token T and the responses Di available to at least one of a public or a verifying 

performing at least one of transmitting the token T and the response Di to at least one 
verifying entity, or storing the token T and the response Di on a database 
accessible to the public or to at least one verifying entity . 

26. (Currently Amended) The computer implemented process according to claim 25, further 
comprising: 
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collecting the token T and the responses D i for i = l,...,m; and 

determining that the message M is authentic if the responses -g-ha s D ^ have a value such 
that: h(M,D v ■ G* A ■ G 2 M2 ■ ... ■ G m £mdm mod n) 

h(M,D* ■ G* A modn,D 2 v ■ G 2 £ldl mod n,...,D m v ■ G m £mdm modn) 

is equal to the token T, wherein, for i = l,...,m, £ t =+l in the case 
G ; • Q- = 1 mod n and £ i = -1 in the case G ; = Q- mod n . 

27-28. (Cancelled) 

29. (Previously Presented) The computer implemented process according to claim 21, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m. 

30. (Previously Presented) The computer implemented process according to claim 22, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = 1, . . . , m . 

31. (Previously Presented) The computer implemented process according to claim 23, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m. 

32. (Previously Presented) A computer readable medium storing instructions which 
when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 , -,Q m and respective public values 
G 1 ,G 2 ,...,G m , each pair of values^., G ; verifying either the equation G^Q. =lmodw or the 
equation G i =Q { V modn, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
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factors designated by p v ...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = \,...,m is such that G t = g t 2 modn , wherein g t for 
i = \,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed such that: R = r v mod n , wherein r is an integer randomly chosen by the 
demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 
sending the challenges d l ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value computed 
such that: D = r- Q dl ■ Q 2 2 ■ ... ■ Q m dm mod n ; and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v ■ G^ 1 -G^ 2 ■ Gj mdm modn is equal to the commitment R , wherein, for i = l,...,m, 
£ i = +1 in the case G i -Q- =1 mod n and e i = -1 in the case G ; = Q- mod n . 

33. (Previously Presented) A computer readable medium storing instructions which 

when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 ,...,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^, G ; verifying either the equation G^Q- =lmodw or the 
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equation G ; =Q. mod/?, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for j = l,...,mis such that G i =g i mod/?, wherein g t for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a commitment R from a demonstrator, the commitment R having a value 
computed using the Chinese remainder method from a series of commitment components Rj , the 

commitment components Rj having a value such that: Rj = r ; v mod p j for j = !,...,/ , wherein 
/},..., r f is a series of integers randomly chosen by the demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 

sending the challenges d v d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
series of response components D j using the Chinese remainder method, the response 

components D j having a value such that: D ; = r j ■ Q Uj 1 • Q 2 j 2 • ... • Q m j m mod p i for j = , 
wherein Q UJ = Q i mod p j for i = l,...,m and j = ; and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v ■ G^ 1 ■ G 2 2d2 ■ ... ■ G m £mdm mod n is equal to the commitment R , wherein, for i = l,...,m, 
£ i = +1 in the case G ; • Q- = 1 mod n and e i = -1 in the case G ; = Q* mod n . 
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34. (Previously Presented) A computer readable medium storing instructions which 

when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 ,—,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^., G ; verifying either the equation G^Q. =lmodw or the 
equation G i =Q { V modn , wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = \,...,m is such that G { = g { 2 modn , wherein g t for 
i = \,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p { ,...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T = h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 
and R is a commitment having a value computed such that: R = r v mod n , wherein r is an 
integer randomly chosen by the demonstrator; 

choosing m challenges d l ,d 2 ,...,d m randomly; 
sending the challenges d l ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value such that: 
D = r ■ Qy l Q 2 2 ■ ... ■ Q m dm mod n ; and 

determining that the message M is authentic if the response D has a value such that: 
/j(m,D v • G^ 1 ■ G 2 ldl ■ ... ■ G m £mdm modn) is equal to the token T, wherein, for i = l,...,m, 
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£ i = +1 in the case G ; • Q- = 1 mod n and £ i = -1 in the case G ; = Q- mod n . 

35. (Previously Presented) A computer readable medium storing instructions which 

when executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 ,...,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^, G ; verifying either the equation G^Q- =lmodw or the 
equation G i =Q. mod/?, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = l,...,m is such that G ; =g ; 2 modw, wherein g t for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

receiving a token T from a demonstrator, the token T having a value such that 
T = h(M,R), wherein h is a hash function, M is a message received from the demonstrator, 
and R is a commitment having a value computed out of commitment components Rj by using 
the Chinese remainder method, the commitment components Rj having a value such that: 
Rj =rj mod p j for j = l,...,f , wherein r v ...,r f is a series of integers randomly chosen by the 
demonstrator; 

choosing m challenges d 1 ,d 2 ,...,d m randomly; 
sending the challenges d l ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
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series of response components D j using the Chinese remainder method, the response 
components D ; having a value such that: D ; = r. • Q x ^ • Q 2 ^ • ... • Q m mod p. for j = l,...,f , 
wherein Q i . = Q i mod p . for i = l,...,m and j = l,...,f ; and 

determining that the message M is authentic if the response D has a value such that: 
Ii(m,D v ■ G^ 1 ■ G 2 ldl ■ ... ■ G m £mdm mod n) is equal to the token T, wherein, for i = l,...,m, 
£ i = +1 in the case G ; • Q- = 1 mod n and £ i = -1 in the case G ; = Q- mod n . 

36. (Previously Presented) The computer readable medium according to claim 32, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m. 

37. (Previously Presented) The computer readable medium according to claim 33, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m. 

38. (Previously Presented) The computer readable medium according to claim 34, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m. 

39. (Previously Presented) The computer readable medium according to claim 35, 
wherein the challenges are such that 0 < d i < 2 k - 1 for i = l,...,m. 

40. (Currently Amended) A computer readable medium storing instructions which when 
executed cause a processor to execute the following method: 

obtaining a set of one or more private values Q l ,Q 2 ,...,Q m and respective public values 
G l ,G 2 ,...,G m , each pair of values^, G ; verifying either the equation G^Q- =lmodw or the 
equation G i =Q. modw, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p 1 ,...,p f , at least two of these prime factors being different from each 
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other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2 k , and wherein k is a security parameter having an integer value greater than 1, and 
wherein each public value G ; for i = l,...,m is such that G ; = g t 2 modw , wherein g t for 
i = l,...,m is a base number having an integer value greater than 1 and smaller than each of the 
prime factors p v ...,p f , and g t is a non-quadratic residue of the ring of integers modulo n ; 

recording a message M to be signed; 

choosing m integers r t randomly, wherein i is an integer between 1 and m ; 

computing commitments R t having a value such that: R t = /f mod n for i = l,...,m ; 

computing a token T having a value such that T = h(M ,R 1 ,R 2 ,...,R m ) , wherein h is a 
hash function producing a binary train consisting of m bits; 

identifying the bits d l ,d 2 ,...,d m of the token T ; 

computing responses D i = r t ■ Q t d ' mod n for i = l,...,m; and 

making the token T and the responses Di available to at least one of a public or a verifying 

performing at least one of transmitting the token T and the response Di to at least one 
verifying entity, or storing the token T and the response Di on a database 
accessible to the public or to at least one verifying entity . 

41. (Currently Amended) The computer readable medium according to claim 40, the method 
further comprising: 
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collecting the token T and the responses D i for i = l,...,m ; and 

determining that the message M is authentic if the responses -£)--has D j have a value 
such that: 1i(m,D v ■ G £]d] ■ G 2 £?d? ■ ... ■ G m £jm mod n) - 

h(M , D/ • G* ldl mod n, D 2 V ■ G 2 £ldl mod n,..., D m v ■ G m £mdm mod n) 

is equal to the token T , wherein, for i = l,...,m, £ t =+l in the case G t -Q- = 1 mod n and 
£i=-l in the case G ; = Q t v mod n . 



